PRIVACY POLICY
CONTROLLER
Laboratorio Terapeutico M.R. S.r.l., Via Domenico Veneziano 13, 50143 Florence tel. +39 055 714724 – info@mr1930.it, is the personal data controller.
METHODS AND PURPOSES OF PROCESSING
Pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter “GDPR”) the controller states that personal data provided voluntarily by the data subject are processed both manually and by means of computers and software applications in order to:
1. comply with legal and contractual obligations (e.g. for accounting and tax requirements, sending pre-contractual offers) and for
2. sending promotional material about the products of Laboratorio Terapeutico M.R., direct marketing activities (legitimate interest of Laboratorio Terapeutico M.R.) to the addresses provided by the data subject
3. for the automated analysis of the data subject’s preferences regarding Laboratorio Terapeutico M.R. products based on the products selected and/or searched for on our website, even if not purchased. The purposes set out in points 2) and 3) constitute a legitimate interest of the controller, which do not take precedence over the interests or fundamental rights and freedoms of the data subject. Provision of data is optional, but it is necessary for the fulfilment of contractual and regulatory obligations in respect of the data subject (purposes referred to in point 1) and consent is not necessary for these purposes. In addition, and also for these purposes, miscommunication of the personal data required may hinder fulfilment of contractual obligations and also result in the impossibility for the controller to guarantee accurate
processing of data and the results of the processing possibly not complying with the obligations imposed by the legislation at which it is aimed. The purposes referred to in points 2) and 3) are possible only with the express and specific consent of the data subject, who is free to give consent or not without any consequences in case of refusal (apart from not being able to receive offers and communications in line with the data subject’s preferences). In any case, this is without prejudice to the possibility to object to and withdraw consent for, including after any specific consent has been given, the sending of promotional material and the automated analysis of the preferences, by contacting Laboratorio Terapeutico M.R. at the above-mentioned addresses. Data belonging to the special categories of personal data referred to in Article 9 of the GDPR (data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, genetic data, biometric data, data concerning health or sex life or sexual orientation) and data relating to criminal convictions and offences referred to in Article 10 of the GDPR will not be processed.
DURATION
The data will be processed as long as there are contractual relations between Laboratorio Terapeutico M.R. and the data subject and for a period of two years following the end of such relations, without prejudice, in any case, to various legal obligations and without prejudice to the rights of the data subject as specified below, including the ability to object to receiving promotional material and to profiling.
SCOPE OF COMMUNICATION
The personal data may be disclosed to companies in charge of fulfilling contractual or regulatory obligations or which manage services relating to the above-mentioned purposes (including, but not limited to, promotional communications, marketing, mailing and call center services to provide documents or information services for which consent has been given); the contact details of these companies will be made available to the data subject on request. Personal data will not be disclosed or transferred outside the European Union.
RIGHTS OF THE DATA SUBJECT
The data subject has the right to access data concerning him or her (Art. 15 GDPR) held by Laboratorio Terapeutico M.R., at any time, by writing to the address above as well as the right, where the statutory requirements are met, to request the rectification of inaccurate data (Art. 16 GDPR), the erasure thereof (Art. 17 GDPR), the restriction of processing (Art. 18 GDPR) or to object to processing (Art. 20 GDPR), as well as the right to data portability (Art. 19 GDPR), without prejudice, however, to legal and contractual obligations, and the data subject also has the right to make a complaint to a supervisory authority (Data Protection Authority).
Express and specific consent to the sending of promotional material/direct marketing activities is provided by the client, who can withdraw such consent themselves by unsubscribing from the Newsletter via the “unsubscribe” link or by writing to the address info@mr1930.it.